BugZero | Cisco BugID CSCvr04725 - ASA will not boot after enabling FIPS and IGMP for...

Cisco - Defect ID: CSCvr04725

ASA will not boot after enabling FIPS and IGMP forwarding configured on interface

Cisco - Defect ID: CSCvr04725

ASA will not boot after enabling FIPS and IGMP forwarding configured on interface

Last updated on October 17th, 2022

BugZero Risk Score
7.8 High

Overall: 7.8

Severity: 8.2

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

Symptom

ASA will not boot past "INFO: FIPS Power-On Self-Test in process."

Conditions

- ASA configured with igmp forwarding on interface (example below): interface GigabitEthernet1/2 nameif test security-level 100 ip address 1.2.3.4 255.255.255.0 igmp forward interface outside <<<<<<< - ASA booted into FIPS mode

Workaround

Remove FIPS from startup configuration: - Manually reload the ASA - Interrupt boot (ESC) - Change the register boot register rommon 1 > confreg 0x41 - Reload the ASA rommon 2 > reload - Copy startup-config to running config ciscoasa(config)# copy startup-config running-config - Remove the fips ciscoasa(config)# no fips enable - Change the register to 0x1 and save the config ciscoasa(config)# config-register 0x1 ciscoasa(config)# wr ============ Workaround 2: Configure "multicast-routing" in ASA. We will not hit the issue.

Further Problem Description

Change history

2025-03-27 Added: 9.10.1, 9.10.1.10, 9.10.1.11, 9.10.1.17, 9.10.1.2, 9.10.1.22, 9.10.1.27, 9.10.1.30, 9.10.1.32, 9.10.1.37, 9.10.1.40, 9.10.1.42, 9.10.1.44, 9.10.1.7, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.12, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.4, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.2, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.4, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.7, 9.12.4.8, 9.13.1, 9.13.1.10, 9.13.1.12, 9.13.1.13, 9.13.1.16, 9.13.1.19, 9.13.1.2, 9.13.1.21, 9.13.1.7, 9.4.1.8, 9.6.0.128, 9.6.1, 9.6.1.10, 9.6.1.11, 9.6.1.12, 9.6.1.19, 9.6.1.3, 9.6.1.5, 9.6.2, 9.6.2.1, 9.6.2.11, 9.6.2.13, 9.6.2.16, 9.6.2.2, 9.6.2.21, 9.6.2.22, 9.6.2.23, 9.6.2.3, 9.6.2.4, 9.6.2.7, 9.6.3, 9.6.3.1, 9.6.3.11, 9.6.3.12, 9.6.3.14, 9.6.3.17, 9.6.3.20, 9.6.3.23, 9.6.3.24, 9.6.3.3, 9.6.3.8, 9.6.3.9, 9.6.4, 9.6.4.10, 9.6.4.12, 9.6.4.14, 9.6.4.17, 9.6.4.18, 9.6.4.20, 9.6.4.22, 9.6.4.23, 9.6.4.24, 9.6.4.25, 9.6.4.29, 9.6.4.3, 9.6.4.30, 9.6.4.34, 9.6.4.36, 9.6.4.40, 9.6.4.41, 9.6.4.42, 9.6.4.45, 9.6.4.5, 9.6.4.6, 9.6.4.8, 9.7.1, 9.7.1.10, 9.7.1.15, 9.7.1.16, 9.7.1.19, 9.7.1.2, 9.7.1.21, 9.7.1.23, 9.7.1.24, 9.7.1.4, 9.7.1.7, 9.7.1.8, 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.2.45, 9.8.2.8, 9.8.3, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.3.8, 9.8.4, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.3, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.7, 9.8.4.8, 9.9.1, 9.9.1.2, 9.9.1.3, 9.9.1.4, 9.9.1.5, 9.9.2, 9.9.2.1, 9.9.2.14, 9.9.2.18, 9.9.2.235, 9.9.2.25, 9.9.2.27, 9.9.2.32, 9.9.2.36, 9.9.2.40, 9.9.2.47, 9.9.2.50, 9.9.2.52, 9.9.2.56, 9.9.2.59, 9.9.2.61, 9.9.2.66, 9.9.2.67, 9.9.2.74, 9.9.2.80, 9.9.2.83, 9.9.2.85, 9.9.2.9

Links

Original Vendor Announcement

Relevant Products

Click on a version to see all relevant bugs

Affected versions:9.10.1, 9.10.1.10, 9.10.1.11, 9.10.1.17, 9.10.1.2, 9.10.1.22, 9.10.1.27, 9.10.1.30, 9.10.1.32, 9.10.1.37, 9.10.1.40, 9.10.1.42, 9.10.1.44, 9.10.1.7, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.12, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.4, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.2, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.4, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.7, 9.12.4.8, 9.13.1, 9.13.1.10, 9.13.1.12, 9.13.1.13, 9.13.1.16, 9.13.1.19, 9.13.1.2, 9.13.1.21, 9.13.1.7, 9.4.1.8, 9.6.0.128, 9.6.1, 9.6.1.10, 9.6.1.11, 9.6.1.12, 9.6.1.19, 9.6.1.3, 9.6.1.5, 9.6.2, 9.6.2.1, 9.6.2.11, 9.6.2.13, 9.6.2.16, 9.6.2.2, 9.6.2.21, 9.6.2.22, 9.6.2.23, 9.6.2.3, 9.6.2.4, 9.6.2.7, 9.6.3, 9.6.3.1, 9.6.3.11, 9.6.3.12, 9.6.3.14, 9.6.3.17, 9.6.3.20, 9.6.3.23, 9.6.3.24, 9.6.3.3, 9.6.3.8, 9.6.3.9, 9.6.4, 9.6.4.10, 9.6.4.12, 9.6.4.14, 9.6.4.17, 9.6.4.18, 9.6.4.20, 9.6.4.22, 9.6.4.23, 9.6.4.24, 9.6.4.25, 9.6.4.29, 9.6.4.3, 9.6.4.30, 9.6.4.34, 9.6.4.36, 9.6.4.40, 9.6.4.41, 9.6.4.42, 9.6.4.45, 9.6.4.5, 9.6.4.6, 9.6.4.8, 9.7.1, 9.7.1.10, 9.7.1.15, 9.7.1.16, 9.7.1.19, 9.7.1.2, 9.7.1.21, 9.7.1.23, 9.7.1.24, 9.7.1.4, 9.7.1.7, 9.7.1.8, 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.2.45, 9.8.2.8, 9.8.3, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3.26, 9.8.3.29, 9.8.3.8, 9.8.4, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.4.20, 9.8.4.22, 9.8.4.25, 9.8.4.26, 9.8.4.29, 9.8.4.3, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.7, 9.8.4.8, 9.9.1, 9.9.1.2, 9.9.1.3, 9.9.1.4, 9.9.1.5, 9.9.2, 9.9.2.1, 9.9.2.14, 9.9.2.18, 9.9.2.235, 9.9.2.25, 9.9.2.27, 9.9.2.32, 9.9.2.36, 9.9.2.40, 9.9.2.47, 9.9.2.50, 9.9.2.52, 9.9.2.56, 9.9.2.59, 9.9.2.61, 9.9.2.66, 9.9.2.67, 9.9.2.74, 9.9.2.80, 9.9.2.83, 9.9.2.85, 9.9.2.9

Fixed versions: No known fixed versions

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: No known fixed versions

Top Cisco Defects by Risk Score

9.65Defect ID: CSCwd45843
Auth Step latency for policy evaluation due to Garbage Collection activity.
9.65Defect ID: CSCwa92734
CUBE DTMF interworking fails from rtp-nte to OOB SIP methods
9.65Defect ID: CSCwj45822
Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability
9.65Defect ID: CSCvo03458
PKI "revocation check crl none" does not fallback if CRL not reachable
9.65Defect ID: CSCvq05584
Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Cisco - Defect ID: CSCvr04725

ASA will not boot after enabling FIPS and IGMP forwarding configured on interface

Cisco - Defect ID: CSCvr04725

ASA will not boot after enabling FIPS and IGMP forwarding configured on interface

Last updated on October 17th, 2022

BugZero Risk Score7.8 High

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

Links

Top Cisco Defects by Risk Score

Ready to prevent the next vendor outage?

BugZero Risk Score
7.8 High